dsh-soul 0.3.3 → 0.5.0

package/lib/config.mjs

@@ -20,7 +20,9 @@ export const DEFAULT_CONFIG = {
   headingLists: 'default',
   emoji: 'default',
   language: 'zh',
-  customInstructions: ''
+  customInstructions: '',
+  // set_persona 工具确认模式：开启后 Agent 的人设修改返回待确认提议而不落盘
+  requireToolConfirmation: false
 }
 
 // 合法的回复风格和语调取值（供工具参数校验）
@@ -44,6 +46,39 @@ export const FIELD_LIMITS = {
 // 需做长度校验的自由文本字段
 const TEXT_FIELDS = ['nickname', 'occupation', 'bio', 'customInstructions']
 
+// ==================== 人设预设 ====================
+
+// 人设预设覆盖的配置字段（enabled 为全局开关、不进入预设）
+export const PERSONA_FIELDS = ['nickname', 'occupation', 'bio', 'style', 'headingLists', 'emoji', 'language', 'customInstructions']
+
+// 人设预设名称上限
+export const PERSONA_NAME_MAX = 30
+
+// 禁用作预设名的保留键（防原型污染）
+const FORBIDDEN_PERSONA_NAMES = new Set(['__proto__', 'constructor', 'prototype'])
+
+// 校验并归一化人设预设名称：trim 后 1..PERSONA_NAME_MAX 字符；非法返回 null
+export function sanitizePersonaName(raw) {
+  if (typeof raw !== 'string') return null
+  const name = raw.trim()
+  if (!name || name.length > PERSONA_NAME_MAX) return null
+  if (FORBIDDEN_PERSONA_NAMES.has(name)) return null
+  return name
+}
+
+// 归一化磁盘上的预设库：只保留普通对象条目，剔除保留键与非对象条目
+export function normalizePersonas(raw) {
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return {}
+  const out = {}
+  for (const key of Object.keys(raw)) {
+    if (FORBIDDEN_PERSONA_NAMES.has(key)) continue
+    const entry = raw[key]
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry)) continue
+    out[key] = { ...entry }
+  }
+  return out
+}
+
 // v0.1.x 配置使用 style + tone 两个字段；v0.2.0 起合并为单一 style（回复风格和语调）。
 // 迁移映射：组合命中用组合表，否则退回旧 style 表，再否则用默认值。
 const LEGACY_STYLE_TONE_MAP = {
@@ -75,6 +110,10 @@ export function migrateConfig(raw) {
   // 特质字段校验：脏数据回退为默认值
   if (!TRAIT_VALUES.includes(config.headingLists)) config.headingLists = 'default'
   if (!TRAIT_VALUES.includes(config.emoji)) config.emoji = 'default'
+  // 确认模式：非布尔脏数据回退为默认值
+  if (typeof config.requireToolConfirmation !== 'boolean') config.requireToolConfirmation = DEFAULT_CONFIG.requireToolConfirmation
+  // 人设预设库归一化：剔除危险键与非对象条目（磁盘无该字段时保持缺席）
+  if ('personas' in config) config.personas = normalizePersonas(config.personas)
   return config
 }
 
@@ -103,6 +142,14 @@ export function sanitizeConfig(raw) {
     }
   }
 
+  if ('requireToolConfirmation' in raw) {
+    if (typeof raw.requireToolConfirmation === 'boolean') {
+      patch.requireToolConfirmation = raw.requireToolConfirmation
+    } else {
+      errors.requireToolConfirmation = '必须为布尔值（true / false）'
+    }
+  }
+
   for (const key of TEXT_FIELDS) {
     if (!(key in raw)) continue
     const value = raw[key]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-soul",
-  "version": "0.3.3",
+  "version": "0.5.0",
   "description": "为 DeepSeek Harness 添加个性化设置",
   "keywords": [
     "dsh",

package/scripts/verify-config.mjs

@@ -10,7 +10,9 @@ import {
   DEFAULT_CONFIG,
   FIELD_LIMITS,
   migrateConfig,
-  sanitizeConfig
+  normalizePersonas,
+  sanitizeConfig,
+  sanitizePersonaName
 } from '../lib/config.mjs'
 
 let passed = 0
@@ -139,4 +141,40 @@ check('非对象输入整体拒绝', () => {
   assert.ok(sanitizeConfig(null).errors._)
 })
 
+console.log('requireToolConfirmation / 人设预设')
+
+check('sanitizeConfig：requireToolConfirmation 布尔校验', () => {
+  const { patch, errors } = sanitizeConfig({ requireToolConfirmation: true })
+  assert.deepEqual(errors, {})
+  assert.equal(patch.requireToolConfirmation, true)
+  assert.ok(sanitizeConfig({ requireToolConfirmation: 'yes' }).errors.requireToolConfirmation)
+})
+
+check('sanitizePersonaName：trim、长度与保留键拒绝', () => {
+  assert.equal(sanitizePersonaName('  工作模式 '), '工作模式')
+  assert.equal(sanitizePersonaName(''), null)
+  assert.equal(sanitizePersonaName('   '), null)
+  assert.equal(sanitizePersonaName('x'.repeat(31)), null)
+  assert.equal(sanitizePersonaName('__proto__'), null)
+  assert.equal(sanitizePersonaName(123), null)
+  assert.equal(sanitizePersonaName(null), null)
+})
+
+check('normalizePersonas：剔除保留键与非对象条目', () => {
+  const raw = JSON.parse('{"__proto__":{"a":1},"work":{"style":"roast"},"bad":1}')
+  const out = normalizePersonas(raw)
+  assert.deepEqual(Object.keys(out).sort(), ['work'])
+  assert.deepEqual(normalizePersonas(null), {})
+  assert.deepEqual(normalizePersonas([1, 2]), {})
+})
+
+check('migrateConfig：personas 归一化透传，缺省时保持缺席；确认模式脏数据回退', () => {
+  const config = migrateConfig({ personas: { work: { style: 'roast' } } })
+  assert.deepEqual(config.personas, { work: { style: 'roast' } })
+  const clean = migrateConfig({ nickname: 'x' })
+  assert.equal('personas' in clean, false)
+  const dirty = migrateConfig({ requireToolConfirmation: 'yes' })
+  assert.equal(dirty.requireToolConfirmation, false)
+})
+
 console.log(`\n全部通过：${passed} 项检查`)